11652 matches found
PHPGurukul User Registration & Login and User Management System 注入漏洞
PHPGurukul User Registration & Login and User Management System is a user registration & login and user management system from PHPGurukul. An injection vulnerability exists in PHPGurukul User Registration & Login and User Management System version 3.3, which originates from an SQL injection due t...
Projectworlds Online Lawyer Management System 注入漏洞
Projectworlds Online Lawyer Management System is an online lawyer management system from Projectworlds India. An injection vulnerability exists in Projectworlds Online Lawyer Management System version 1.0, which originates from an operation in the file /savelawyereditprofile.php that results in S...
PHPGurukul Zoo Management System 安全漏洞
Zoo Management System is a zoo management system. Zoo Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter aname in the file /admin/edit-animal-details.php. An attacker can exploit this...
CVE-2025-4813
A vulnerability, which was classified as critical, was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. Affected is an unknown function of the file /edit-phlebotomist.php. The manipulation of the argument mobilenumber leads to sql injection. It is possible to launch the...
CVE-2025-4793
A vulnerability was found in PHPGurukul Online Course Registration 3.1. It has been classified as critical. Affected is an unknown function of the file /edit-student-profile.php. The manipulation of the argument cgpa leads to sql injection. It is possible to launch the attack remotely. The exploi...
CVE-2025-4744
A vulnerability, which was classified as problematic, has been found in code-projects Employee Record System 1.0. Affected by this issue is some unknown functionality of the file dashboard\editemployee.php. The manipulation of the argument employeedid/firstname/middlename/lastname leads to cross...
CVE-2025-4744 code-projects Employee Record System edit_employee.php cross site scripting
A vulnerability, which was classified as problematic, has been found in code-projects Employee Record System 1.0. Affected by this issue is some unknown functionality of the file dashboard\editemployee.php. The manipulation of the argument employeedid/firstname/middlename/lastname leads to cross...
PHPGurukul Online Course Registration 注入漏洞
Online Course Registration is an online course registration system. Online Course Registration suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter cgpa in the file /edit-student-profile.php. An attacker can...
CVE-2025-4722
A vulnerability classified as critical has been found in itsourcecode Placement Management System 1.0. Affected is an unknown function of the file /editprofile.php. The manipulation of the argument Name leads to sql injection. It is possible to launch the attack remotely. The exploit has been...
CVE-2025-4704
A vulnerability was found in PHPGurukul Vehicle Parking Management System 1.13 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/edit-category.php. The manipulation of the argument editid leads to sql injection. The attack may be launched remotely...
CVE-2025-4704
CVE-2025-4704 affects PHPGurukul Vehicle Parking Management System 1.13. A SQL injection vulnerability exists in the file /admin/edit-category.php through manipulation of the editid parameter, enabling remote exploitation. Multiple sources confirm an injection flaw and public disclosures. No offi...
CVE-2025-4704 PHPGurukul Vehicle Parking Management System edit-category.php sql injection
A vulnerability was found in PHPGurukul Vehicle Parking Management System 1.13 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/edit-category.php. The manipulation of the argument editid leads to sql injection. The attack may be launched remotely...
CVE-2025-44182
Phpgurukul Vehicle Record Management System v1.0 is vulnerable to Cross Site Scripting XSS via the vehiclename, modelnumber, regnumber, vehiclesubtype, chasisnum, enginenumber' in the /admin/edit-vehicle.php component. This allows attackers to execute arbitrary code...
CVE-2025-44180
Phpgurukul Vehicle Record Management System v1.0 is vulnerable to Cross Site Scripting XSS in /edit-brand.php?bid=brandId...
CVE-2025-4697
A vulnerability was found in PHPGurukul Directory Management System 2.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/edit-directory.php. The manipulation of the argument editid leads to sql injection. The attack may be launched remotely...
CVE-2025-4697 PHPGurukul Directory Management System edit-directory.php sql injection
A vulnerability was found in PHPGurukul Directory Management System 2.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/edit-directory.php. The manipulation of the argument editid leads to sql injection. The attack may be launched remotely...
itsourcecode Placement Management System 注入漏洞
itsourcecode Placement Management System is an open source placement management system from itsourcecode. An injection vulnerability exists in version 1.0 of itsourcecode Placement Management System, which originates from a SQL injection due to incorrect manipulation of the parameter Name in the...
CVE-2025-44180
CVE-2025-44180 affects Phpgurukul Vehicle Record Management System v1.0. Affected component: /edit-brand.php (bid parameter). Root cause: inadequate input filtering/escaping of user-supplied data, enabling Cross-Site Scripting (XSS). Impact: potential execution of arbitrary web script in the cont...
PHPGurukul Vehicle Record Management System 安全漏洞
Vehicle Record Management System is a vehicle record management system. Vehicle Record Management System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in /edit-brand.php, which can be exploited by an attacker t...